Discover is a collection of Bash and Python scripts that automate penetration testing tasks including reconnaissance, scanning, enumeration, and payload generation using Metasploit, designed for Ubuntu with limited support for Kali Linux.
The tool addresses the need to streamline repetitive penetration testing workflows by bundling custom automation scripts for common assessment activities. It organizes functionality into distinct phases: reconnaissance tasks like domain research, subdomain discovery, and social media gathering; scanning operations including target list generation and web vulnerability checks; and payload creation with Metasploit listener setup. The tool tracks operator activity through audit logs that record the name of the person running each command, supporting engagement documentation and accountability.
Discover suits penetration testers and red teamers working on Ubuntu systems who want to reduce manual effort in information gathering and scanning phases. The tool includes specialized capabilities for enriching reconnaissance data with Shodan, detecting web application firewalls, scanning for insecure direct object references, and checking for open redirects. It also provides security scanners for APIs, cloud infrastructure, containers, OAuth and JWT implementations, and sensitive information exposure. The project is designed for assessment workflows where operators need to quickly generate target lists from CIDR ranges, IP addresses, or URLs, then run coordinated scanning and enumeration against those targets.
Development activity shows consistent maintenance with regular updates to dependencies and tooling. The project maintains an active update mechanism that installs and refreshes required tools like droopescan, feroxbuster, ffuf, jq, and nuclei. The codebase includes a dedicated development menu with specialized security scanners suggesting ongoing feature expansion. Documentation is comprehensive with detailed table of contents covering setup, usage patterns, and specific assessment workflows.
